Hi Jon,
I would use port forwarding. The rule in ipchains looks like this:
/usr/sbin/ipmasqadm portfw -a -p tcp -L InternetIP Port -R InternalIP Port
/usr/sbin/ipmasqadm portfw -a -p tcp -L xxx.xxx.xxx.xxx 80 -R xxx.xxx.xxx.xxx 80 (
this allows http through to an internal machine )
There are some good how to docs on Ipchains at www.linuxdoc.org that can tell you more
about it.
Sheridan
Jon Greisz wrote:
I'm a linux newbie. I've set up a machine with Mandrake 7.1 that I'm about to
convert to 7.2. I want to use it as a firewall between my internal network and my
outside T1. I've got a firewall script set up using IPChains that seems to work
pretty well. I created and used internal network IP addresses.
I've got several machines where I would like certain ports to get through the
firewall. I have assigned internet IP addresses for these machines that I would like
to translate to my internal IP's, and reverse it going out. But only on certain
ports.
What is the best approach for this?
Thanks,
Jon Greisz
*** REPLY SEPARATOR ***
On 11/2/00 at 8:45 AM Mark Johnson wrote:
Yes, this looks like another eruption of off-topic posts... IMHO, VB should
be ported because that is the only way to achieve portability for MS Office
documents. StarOffice is really cool but ultimately not feasible if you are
exchanging documents with a group of MS Office folks. Unfortunately, VB
would bring office products closer to managing that feasiblity.
Unfortunately, VB is not an elegant language but it suits it's purpose. Too
bad tcl, perl, python, java, or javascript wasn't used for building these
dynamic docs. But those languages present quite a learning curve, this was
VB strength. Also, it enabled MS to lock in a lot of folks to it's
proprietary ways of doing things.
Keep in touch with http://mandrakeforum.com:
Subscribe the "[EMAIL PROTECTED]" mailing list.
begin:vcard
n:Hawken;Sheridan
tel;fax:+1.403.253.5580
tel;work:+1.403.253.5531
x-mozilla-html:FALSE
url:www.alterna.com
org:Alterna Technologies Group Inc.;Shared Service Centre
adr:;;Suite 200, 5970 Centre Street SE ;Calgary;Alberta;T2H 0C1;Canada
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technology Analyst
x-mozilla-cpt:;-29760
fn:Sheridan Hawken
end:vcard
Keep in touch with http://mandrakeforum.com:
Subscribe the "[EMAIL PROTECTED]" mailing list.